+1 for Firestarter. Yes it's pretty, the wizard is rather good, and the documentation explains exactly what the wizard is doing if you don't know why you would want to enable Source Quench for a ICMP packet filter. - SL >cAos uses firestarter. I like it, it's pretty. > >http://firestarter.sourceforge.net/